Question: Ability to apply patches

I'm using SMP 7.1 SP2 MP1. I have given access to my help desk support team to view all the patches of windows, Linux and MAC. However they can NOT right-click on patch and apply it to the client computers. if they right-click on the patch then nothing happens so access is denied. Which permission do they need for this purpose ?

In case if this does not resolve your issue, you may compare your custom permissions and privileges with Patch Management Rollout role.
Please note that Patch Management Rollout role is default role with minimal privileges for Patch Management Solution and it does not allow to stage and distribute patches until 'Distribute Software Update' and 'Download Bulletin' are enabled under section 'Software Update Management Privileges'

I have confirmed that help desk role has allow access for Righ click menu, Distribute Software Update and Download Bulletin. but still has the issue. below is the the access denied picture and logs from the NS server.

Can the CMS Admin distribute patches? If so, clone that role, then uncheck the things you don't want them to have access to.

I also had a lot of trouble setting up roles. It was advised to start with a role with all privs and then remove, versus starting with an almost empty role and adding because of things going on in the back end.

---
Don't forget to mark posts as helpful if they are, and mark answers as solutions.

thats exactly what i did , i coloned the administrator account to the helpdesk role and then removed their permission. but some where its missing the ability to have access to the patches. the logs are not friendly enough to troubleshoot.

That's really weird. I would recommend you to try from scratch - clone new role and remove unneeded privileges and permissions. If that would not help, then you'll probably need to call Symantec support so that they would take a look directly on your environment.